CRMG Perspective: Why your vendors could pose the greatest cyber risk to your business

It’s common for businesses to work with a wide range of suppliers.

From outsourced payroll management to accounting software, organisations of all sizes rely on vendors and the services they provide for business-critical processes, solutions and activities. But did you know that these suppliers can pose a significant risk when it comes to cyber security? 

Third-party providers can act as a hidden back door through which attackers can access and take down your business. Without the right products and processes in place, your supplier’s cyber risk becomes your own, and that leaves you vulnerable not only to a cyber attack but also to other consequences of poor vendor cyber security hygiene. 

This lack of awareness means that small to medium-sized businesses are not ascertaining the level to which their vendors are cyber resilient, nor taking the steps required to close any gaps that attackers could and will exploit given the opportunity. 

Of course, most businesses are unsure how to assess a vendor regarding the cyber security protections and processes they have in place, or how to identify areas of exposure and how to address them. 

Meet Our Leadership Team.

At CRMG, our senior leadership team brings a rich history and deep expertise in cyber security. Spearheaded by consultants who are influential figures in the industry, our leaders are highly networked and well-established, with backgrounds in the ‘Big- Four’ firms.

LEARN MORE

Simon Rycroft

CO-FOUNDER AND CEO

Former Head of Consulting at the ISF. On a journey to bring accessible risk management to growing enterprises.

Nick Frost

CO-FOUNDER AND CHIEF PRODUCT OFFICER

Former Group Head of Information Risk, PwC. Motivated by the need to implement cyber risk principles for the real world!

Dan Rycroft

DELIVERY DIRECTOR

Former Head of Delivery, Cyber Security at DXC. Delivers risk-based cyber security programmes with maximum efficiency.

Matt Brett

DELIVERY LEAD – CYBER RISK SOLUTIONS

Former Portfolio Director, Tech Security & Risk, GSK. Specialises in implementing efficient, pragmatic cyber risk solutions.

Martin Tully

DELIVERY LEAD – GOVERNANCE AND COMPLIANCE

Twenty years’ experience in delivering fit-for-purpose cyber governance initiatives.

Louis Head

CONSULTANT – GOVERNANCE AND COMPLIANCE

An expert in everything ISMS-related, and how compliance works in practice.

Guy Asch

COMMERCIAL DIRECTOR

A seasoned Commercial Director, driving P&L business leadership through innovative strategies.

Ryan Hides

DELIVERY LEAD – THIRD PARTY RISK MANAGEMENT

Project Management and Six Sigma expertise. Specialises in turning effective third party risk management into a scalable reality.

Sarrah Ahmed

HEAD OF MARKETING

Bringing over 17+ years of marketing expertise, passionate about crafting innovative marketing campaigns.